Use of internet site as a registry for results of medical tests

ABSTRACT

Results of medical tests for sexually transmissible diseases (STDs) or other medical conditions such as drug use are posted to a registry site accessible by a subscriber and any authorized guest of the subscriber. The medical test results are associated with a verification of the subscriber&#39;s identity. The verification may be in the form of a driver&#39;s license number, or other indicia of identification, recorded when a test sample was drawn by a testing lab affiliated with the registry site. Results of the test performed by the testing lab are automatically posted to the registry site, along with the customer ID assigned to the subscriber when registering with the registry site, and the verification of the subscriber&#39;s identity. Subsequently, the subscriber and any authorized guest or prospective sexual partner can access the subscriber&#39;s test results and the verification of the subscriber&#39;s identity by entering a predefined password or other access code, thereby enabling the guest, who may be a prospective sexual partner, to verify a medical condition asserted by the subscriber.

RELATED PATENT APPLICATION

This application is based on prior copending U.S. provisional patentapplication Ser. No. 60/185,462, filed Feb. 28, 2000, the benefit of thefiling date of which is hereby claimed under 35 U.S.C. §1.19(e).

FIELD OF THE INVENTION

This invention generally relates to a method and system for reportingmedical test results over a network, and more specifically, to providinga registry at which subscribers' medical test results can be accessedover a public network by the subscribers.

BACKGROUND OF THE INVENTION

The potential for contracting life threatening or currently incurablediseases such as human immunodeficiency virus (HIV or acquiredimmunodeficiency syndrome (AIDS)) through sexual contact with infectedpartners has substantially changed attitudes about engaging in casualsex in our society. While certain measures can minimize the risk that asexually transmissible disease will be transmitted from one partner toanother, many people have viewed that risk as too great to justify asexual relationship with another person. One way in which prospectivesexual partners can minimize the risk and alleviate the dampeningeffects of concern about contracting such diseases from the otherpartner is to first ensure that each partner has recently been testedfor at least life threatening or currently incurable sexual diseases,with negative results.

In many cases, a verbal assurance by a prospective sexual partner thatthe person has recently been tested for diseases such as HIV, genitalherpes, hepatitis B, or hepatitis C will not be sufficient to convincethe other partner to engage in sex, since the person giving theassurance may not have been tested or may have been tested with positiveresults for such disease. Proof of the testing is somewhat hard toprovide, particularly when the prospective sexual union has occurredfollowing a casual meeting or under circumstances in which proof, suchas documentation of the medical test results, is not readily available.Clearly, a readily accessible registry that shows proof of recentnegative test results for sexually transmitted diseases (STDs) for eachpartner would greatly reduce the risk of contracting such diseases froma sexual liaison, and the assurance provided by enabling the otherprospective partner to access this proof would certainly reduce theconcerns of both prospective partners for incurring such risks.

The Internet has become a freely and widely accessible site for alltypes of information and would provide an ideal medium to enable medicaltest results to be readily accessed by a party who has been tested andhas authorized the test results to be recorded in an accessibleregistry. The registry in which such test results are stored could beaccessed through any computer or other computing device that is coupledto the Internet, from virtually any place in the world. Alternatively,the registry could be accessed by telephone. The only other requirementsfor such a registry to serve the intended function would be that theaccess to an individual's test results be securely limited only to theperson who was tested and to others provided access by that person, andthat the party who was tested be unable to modify the test results thatare posted, other than to delete the results. Clearly, it is veryimportant that the other prospective sexual partner be able to rely uponthe results of such medical tests to the extent that the tests wereproperly carried out by a certified testing agency.

The ability to access the results of tests for STDs in an accessibleregistry would not mean that partners engaging in sex should do sowithout taking other protective measures, such as using condoms. Infact, it would be desirable to provide education about safe sexpractices at the same site as the registry in which the test results arestored and accessed in order to encourage individual awareness of risks,and responsibility and safety in dealing with STDs. The registry sitemight thus include information of a socially conscious nature or providelinks to information concerning the practice of safe sex, in addition toproviding the test results for assuring a prospective sexual partnerthat the other prospective partner was tested and found to be free ofSTDs, of at least a life threatening or incurable type.

It would also be desirable to employ a registry accessible over theInternet (or other public network, including the public telephonenetwork) at which test results for other types of medical tests could bestored and accessed by the person tested and/or by authorized medicalpersonnel. While many other types of test results could be accessed onsuch a site, examples of such tests would be those carried out tomeasure blood glucose (for diabetes), or to measure protimes (for bloodclotting factor), troponin (cardiac function), myoglobin (cardiacfunction), or creatinine (for renal function). Use of a registry tostore these results would minimize paper work and reduce errors inreporting the results.

Also, it would be desirable to store the results of home medical testsat an Internet registry site, so that both the individual being testedand that person's physician are able to access the results. Inconnection with home testing, it would be preferable to provide aninterface between an automated test apparatus designed to carry out thetest and the individual's computer to process the test results andtransmit them to the registry for storage. For example, the testapparatus might couple to the person's computer through a universalserial bus (USB) port or through a serial or parallel port. Some testsrequire that a relatively complex analysis be performed to determine thelevel of a substance in the person's blood or other bodily fluids or inbodily samples (e.g., serum, plasma, urine, saliva, hair, etc.), andsuch tests are more readily carried out by a personal computer. Theresults could then be automatically transmitted to the registry site forstorage and access by the person's physician or for use in prescribingappropriate drugs, therapy, or prophylactic measures. Alternatively, thetest data could be analyzed by the registry site or its affiliatedlaboratory(ies) and the results made available on the registry site foraccess by the subscriber or other individual authorized by thesubscriber.

Another possible application of this invention is a registry site thatis directed to securely storing the results of testing for recreationaland illicit drugs (e.g., marijuana, cocaine, opiates; phencylidine,amphetamines, barbiturates, benzodiazepines, methadone, propoxyphene andalcohol). Such a site could be used, for example, by employers andemployees or prospective employees where such testing is a requirementof employment, i.e., in law enforcement, judicial and drugrehabilitation settings, or in the required testing of athletes.

Accordingly, it will be apparent that providing a site, which is secure,for storing medical test results accessible over a network (such as theInternet) has many desirable applications. Currently, no such site isavailable that both provides evidence of the identity of the individualtested and also enables the secure access of test results.

SUMMARY OF THE INVENTION

In accord with the present invention, a method is defined forregistering the results of a medical test performed on a subscriber sothat the results are accessible only to authorized parties over acommunication network and can serve as evidence of a medical conditionof the subscriber. The method includes the step of receiving the resultsof the medical test of the subscriber from a testing agency thatperformed the medical test, along with an indicia of an identity of thesubscriber. Note that for purposes of this specification and of theclaims that follow, the terms “testing agency”, “testing lab” and “testlab” refer to a facility where blood, other bodily fluid or a bodilysample is collected, together with a facility where the actualtesting/analysis is performed. The collection facility and thetesting/analysis facility may be located at the same site or atdifferent sites. The results of the medical test of the subscriber arestored at a registry site provided by a subscription service. Thesubscriber is readily able to access the results of the medical test andthe indicia of the identity of the subscriber at the registry site overthe communication network to provide evidence to another party of themedical condition of the subscriber, based upon the results of themedical test.

In one preferred application of the present invention, the medical testis preferably a test for a STD, and more preferably, a potentiallylife-threatening or currently incurable STD. Also, in this preferredapplication, the other party is likely to be a prospective sexualpartner of the subscriber. To ensure the security of the medical testresults, the subscriber is preferably provided with an access codeincluding a user name and a password that must be supplied to gainaccess to the results of the medical test stored at the registry site.

The method also preferably includes the step of requiring the subscriberto authorize transmittal of the results of the medical test from thetesting agency to the registry site prior to and as a condition to thestep of receiving the results from the testing agency. Once the testingagency is authorized to do so, it electronically transmits the resultsof the medical test to the registry site.

A history of the results from medical tests performed on the subscriberat different times will also be maintained at the registry site. Thistesting history will likely include a date at which each medical testwas performed, and can be accessed only by authorized parties, e.g., thesubscriber.

The subscription service optionally charges the subscriber a fee forproviding access by the subscriber to the results of the medical test atthe registry site and/or may charge a fee for receiving and storing theresults of the medical test.

A link on the registry site can be provided to a different site(maintained by another party) that provides information of potentialinterest to the subscriber. A fee can then be charged to the other partyin regard to the subscriber accessing the different site via the link onthe registry site of the subscription service.

It is also contemplated that the registry site provided by thesubscription service will display advertising and charge a fee fordisplaying the advertising.

The subscriber will optionally be able to access the results of themedical test via an electronic data communication link to the registrysite. As used herein and in the claims that follow, the terms“electronic data communication”, “communication network” and“communication channel” are intended to encompass all forms of wired andwireless communication, including but not limited to, communicationbetween computing devices over local and wide area networks,communication using all types of network access devices, telephones,facsimile machines, and all other forms of electrical and electroniccommunication between disparate sites.

In one embodiment, the subscription service will specify the testingagency that will provide the medical test of the subscriber and willreceive a portion of a fee charged to the subscriber by the testingagency for carrying out the medical test. Optionally, the testing agencywill provide a discount to the subscriber for using the testing agencythat was specified by the subscription service.

The subscriber will be able to delete the entire history of the resultsof the subscriber's medical tests from the registry site. In addition,the subscriber will be able to determine who will have access to theresults of the medical test stored at the registry site. The subscribercan also limit access of a guest to specific parts of the data of thesubscriber that are stored at the registry site.

Another aspect of the present invention is directed to a system forenabling limited access to results of a medical test performed on asubscriber so that the results are accessible only to authorized partiesover the electronic communication network and can serve as evidence of amedical condition of the subscriber. The system includes a server thatstores the results of the medical test and makes the results availableto the authorized parties in a manner generally consistent with thesteps of the method described above.

BRIEF DESCRIPTION OF THE DRAWING FIGURES

The foregoing aspects and many of the attendant advantages of thisinvention will become more readily appreciated as the same becomesbetter understood by reference to the following detailed description,when taken in conjunction with the accompanying drawings, wherein:

FIG. 1 is a schematic diagram of the components of the presentinvention;

FIG. 2 is an overview flow chart showing the steps implemented in thepresent invention;

FIG. 3 is a flow chart showing the steps implemented in an onlineregistration of a subscriber in the present invention;

FIG. 4 is a flow chart showing the steps implemented in a mail or phoneregistration of a subscriber in the present invention;

FIG. 5 is a flow chart showing the steps implemented when a subscriberregisters at a kiosk;

FIG. 6 is a flow chart showing the steps for verifying identity of thesubscriber with a driver's license;

FIG. 7 is a flow chart showing the steps involved in taking a digitalphotograph of a subscriber to prove identity;

FIG. 8 is a flow chart listing the steps for automatic posting of testresults by a laboratory;

FIG. 9 is a flow chart showing the steps involved when a subscriberreviews the test results and then decides to post them on the site;

FIG. 10 is a flow chart showing the steps taken to manually post thetest results on the web site; and

FIG. 11 is a block diagram showing principle functional components of apersonal computer suitable for implementing the present invention.

DESCRIPTION OF THE PREFERRED EMBODIMENT

The present invention makes use of an Internet web site that will serveas a clearing house or registry for STD test results. Registration of adomain name for such a site has already been secured and isInformedPartner.com. This web site will provide subscribers secureaccess to personal information of a very sensitive nature, and willtherefore implement extremely high standards of security to ensure thatthe information is not accessible by unauthorized parties and is notchanged to alter the results of a medical test performed on asubscriber. Because the service is only available to subscribers whohave registered with the web site, the following discussion and theclaims that follow refer to this web site as a “registry site.”

Subscribers registering for the service provided by this registry sitewill have the option of having their STD test results posted to theregistry site, along with an independent verification of thesubscriber's identity, which is referred to in the claims that follow as“an indicia of the identity of the subscriber.” In addition, thesubscriber can also post test results that are not associated withverification of the subscriber's identity. In this case, the registrysite will, simply provide a repository for such data, creating ahistorical database of medical test results that may be of benefit tothe subscriber, and will indicate, in connection with such data, thatthe identity of the individual tested has NOT been verified. However,the primary purpose of the service provided to the subscriber by theregistry site is to enable proof of a medical condition to be presentedto a prospective sexual partner of the subscriber based upon the resultsof one or more medical tests that were performed on the subscriber by atesting laboratory affiliated with the registry site. The subscriber'spersonal information is securely accessible only by authorized partiesvia an Internet or other electronic communication connection. Results ofa medical test and other personal data of the subscriber can be accessedand displayed to the subscriber or to any other party who has previouslybeen authorized by the subscriber to have access to data of thesubscriber by entering a correct user name (and/or a customer ID number(ID) assigned to the subscriber) and the correct password. Thesubscriber will choose or be assigned a unique password, and will chooseor be assigned a unique guest password and/or guest ID number for eachspecific other party authorized by the subscriber to access a selectedportion of the subscriber's personal data. Thus, the subscriber can setaccess rights that limit the specific data of the subscriber that can beaccessed by another party, based upon the password and/or guest IDnumber entered by the other party, which the subscriber will provide tothe other party. A guest permission may optionally be valid for a singleuse only. Once a guest uses the credentials (the guest ID number and/orguest password) to access the subscriber's data, those credentials willexpire, making it impossible for that guest or anyone else not soauthorized to access the information on the web site.

Data maintained by the registry site will include personalidentification information for each subscriber, a record of the types ofmedical tests performed on the subscriber, a test date, and testresults, all of which will be associated with the customer ID originallyassigned to the consumer. This information will be delivered in a formatthat is appropriate for display on a variety of different types ofInternet or electronic communication access instruments.

In FIG. 1, a system diagram illustrates various components of apreferred system for implementing the present invention, includingmaintenance of data at the registry site, and providing access of thatdata by a subscriber (or by another party authorized by the subscriber).Currently, it is likely that, in most cases, a subscriber will connectto the registry site using a personal computer (PC) 20 on which abrowser program is executed. Examples of suitable browsing programs forexecution on PC 20 include Microsoft Corporation's INTERNET EXPLORER™,and Netscape Corporation's NAVIGATOR™ browser programs. However, it isalso contemplated that other devices, such as a personal digitalassistant (PDA) 22 or a cell phone 24 that are Internet access enabled,can alternatively be used to access medical test results and otherpersonal information of a subscriber that are maintained at the registrysite. An appropriate format for the data maintained at the registry sitewill be provided for the specific Internet or electronic communicationdevice employed to access the data. Thus, PC 20 can access datadisplayed using the full browser graphic user interface, while only atextual representation of the data will be displayed on cell phone 24.Details such as the type of Internet access employed by a subscriber,e.g., access over conventional telephone lines using a modem, a cablemodern, a high-speed digital subscriber line, or satellite access ofInternet 28 are not illustrated in FIG. 1, since these details are notpertinent to the present invention. However, as is evidenced by theinclusion of PDA 22 and cell phone 24, it is contemplated that varioustypes of wired and wireless connections with Internet 28 can be used forelectronic data communication with the registry site at which the testresults of a subscriber are maintained.

A consumer wishing to subscribe to the service provided by a registrysite 30 can initially contact the registry site (to register as asubscriber to the service) over Internet 28 using PC 20, PDA 22, or cellphone 24, or may call the registry site by telephone, or by mail, email,or facsimile transmission. Alternatively, a consumer wishing tosubscribe to the service may first become aware of it when exposed toadvertising associated with an information kiosk 26 or when the consumervisits a testing lab to be tested for a STD. Each of the testing labsaffiliated with the registry site will include one or more testing labkiosks 32 that are connected to the registry site over Internet 28. Itis contemplated that information kiosks 26 will be provided in placessuch as singles bars, which consumers having an interest in becoming asubscriber to the service provided by the registry site are likely tofrequent and in which they are likely to meet prospective sexualpartners. The information kiosk or testing lab kiosk can thus provide aconnection to the registry site enabling a consumer to become asubscriber of the service. Alternatively, these kiosks can be used toconnect to the registry site for access of the test results of asubscriber. Thus, in singles bars and other locations where people maymeet others with whom they would be interested in having a sexualliaison, the information kiosks can be employed to provide evidence of asubscriber's medical condition, thereby enabling the subscriber toprovide proof that when last tested for a STD, the results of the testwere as asserted by the subscriber. Clearly, in most instances, bothprospective sexual partners will preferably be subscribers, so that eachcan provide the proof of the medical condition that the otherprospective partner would prefer.

Revenue Model for Registry Site

As illustrated in FIG. 1, Internet 28 is the most likely channel for asubscriber (or a consumer who wants to register as a subscriber) toaccess registry site 30. Before making use of the services provided byregistry site 30, a consumer must register and thereby become asubscriber; and details of the registration process are discussed below.It is contemplated that a monthly or annual subscription fee will becharged to a subscriber for providing the services explained herein. Inaddition to paying a periodic subscription fee, each subscriber willlikely be charged each time that test results of medical tests performedon the subscriber are transferred to the registry site for storage, anda smaller charge may be incurred each time that the subscriber'spersonal data and test results are accessed over Internet 28. It is alsocontemplated that the registry site will display links to other websites that provide information of possible interest to subscribers. Forexample, a link might be provided to a web site that sells birthcontrol-related products, or a link might be provided to a site thatdiscusses newly developed treatments for STDs. The registry site mayimpose a charge to the other web site each time that the link to theother web site is activated, or may charge a fixed fee for simplyincluding the link. In addition, the registry site will likely displaybanner ads and other advertising components for web sites run by others.Typical fees for displaying such advertising at the registry site willbe charged to those who are advertising in this manner.

Another source of revenue for the registry site will derive from theregistry site specifying the testing labs that are affiliated with theregistry site. A portion of the medical test fee charged by such atesting lab will then be received by the operators of the registry site.Since the service of the registry site is at least national, and morelikely, will become international, the testing labs required to serviceall of the subscribers of the registry site will be distributed all overthe country, and possibly, in all major countries of the world.Optionally, the testing labs may provide a discount to subscribers ofthe registry site, recognizing that the increased volume arising fromthe referral provided by the registry site will more than compensate thetesting lab for the portion of the fee returned to the registry site andany discount provided the subscribers of the registry site.

Secure Access of Subscriber Data

A key aspect of the service provided by registry site 30 is the securitywith which the personal information of each subscriber is maintained.The security of this personal information and the test result data isprotected by requiring that each subscriber enter a user name and uniquepassword before being allowed access to the data of the subscriber. Inaddition, each subscriber is provided with, or can specify, a guest orpartner ID number and/or password that must be entered to enable theguest to gain access to that portion of the subscriber's personalinformation and test results to which the subscriber has authorizedaccess. The subscriber controls the access to this data and informationby setting permissions for each specific unique guest or partner IDnumber. Such permissions will enable the subscriber to determine theinformation displayed to the guest and the protection level provided.For example, the subscriber can specify whether: (1) the guest requiresa guest ID number and a secondary password; (2) the guest is permittedto view only a particular type of test (e.g., a test for STD, but notfor drugs); and, (3) the guest ID number and/or password is valid foronly a single use or for multiple accesses of the subscriber'sinformation and test results. The guest ID numbers are not sequential,but instead are randomly generated to prevent someone from “guessing” amore current guest ID, based on a previous guest ID.

The web site may optionally include a Digital Certification, providing averifiable form of identification that the web site being accessed is,in fact, the true registry site, or the web site can provide other meansto prove its authenticity as the registry site. For example, theregistry site may enable a prospective partner, who also is a subscriberof the registry site, to access his or her test data, using his or hercustomer ID and/or password, directly from the subscriber's displayedinformation, to mitigate the risk that inaccurate or fraudulent testresults posted on a fraudulent site can be displayed to an unwittingprospective partner. To mitigate the possibility of a third partyaccessing a subscriber's displayed test results without the permissionof the subscriber, the browser may be set to refresh after a shortperiod of time and then automatically display a non-confidential pagewithin the registry site (e.g., a guest login page). All web-basedcommunications accessing personal information and data of a subscriberthat are maintained on registry site 30 will be via a secure socketlayer (SSL) encrypted Internet connection to registry site 30 and willbe through a firewall 34. Firewall 34 isolates the sensitive informationof the subscribers, preventing unauthorized access by third parties.Communications through firewall 34 from Internet 28 are connected to aload balancer 36, which distributes the Internet traffic generallyequally between a plurality of web servers 38 a through 38 d, therebyminimizing delays by subscribers and authorized guests in accessing thepersonal information and test result data. Firewall 34 also restrictsaccess to the web services of each of these web servers and ensures thatno outside traffic can directly reach the web servers.

Application servers 40 a and 40 b form a middle tier in the architectureof registry site 30 and are isolated from the Internet by both firewall34 and load balancer 36. Only an application running on the applicationservers can enable access by authorized parties to data of thesubscribers maintained on a database server 42. The business logic forthe web based application that enables subscribers to access theirindividual test results and other personal information are hosted by theapplication servers. Also, the application servers generate dynamiccontent based on data extracted from the database maintained on databaseserver 42. Any incoming queries from web servers 38 a through 38 d aredispatched to the application servers, which perform appropriate queriesof the data, extracting the requested information once all requirementsfor secure access have been met. Also, the application servers formatthe returned data in a form appropriate for the client Internet accessdevice that has queried registry site 30, so that the form isappropriate and tan readily be rendered on the PC, PDA, cell phone, orother Internet or electronic access device being used by the subscriber.The output produced from a query of database server 42 will be returnedto the web server that requested it, under the control of theapplication running on one of the application servers.

Another key aspect in maintaining the integrity and security of testresult data will be the use of a virtual private network (VPN) 60, whichis connected to each affiliated testing lab work station 58. Severaldifferent approaches are contemplated for entry of test results intodatabase server 42. One preferred approach is to completely automate theprocess of reading the test results from medical tests performed onsubscribers and to automatically batch load the test results into thedata at registry site 30 over VPN 60, so that no human intervention isrequired for transcribing the test results. Automating this processshould minimize the risks of inadvertently introducing an error in theresults reported and stored for any subscriber. Alternatively, testresults from medical tests of subscribers can be entered in anappropriate form at testing lab work station 58, by trained personnel atthe testing lab. It is highly preferred that no personnel at registrysite 30 be involved in the processing of test results or entry of thetest results into the data maintained on database server 42. By limitinghuman interaction in the process only to personnel at the testing lab,any liability of the registry site for error in the result or in theperformance of the medical test, or in the entry of the test resultsinto the data will be avoided by the registry site. Transmission of thetest results over VPN 60 in an encrypted form (either as an automatedbatch load or as manual transcription entries on a form) will ensurethat the results cannot be intercepted by a third party. Also, sinceapplication servers 40 a and 40 b interact with testing lab work station58 for providing entry and transmission of the test results into thedatabase maintained on database server 42, they will provide anautomated verification of the receipt of the test results by theregistry site to the testing lab that submitted the test results.

Strict administrative controls will be enforced on the security of theapplication and application servers hosting the application that enableaccess to the subscriber data. All subscriber data contained withindatabase server 42 of a sensitive nature will be encrypted and onlyaccessible by administrator level personnel at the registry site, whobecause of the encrypted form of the data, will be unable to directlydisplay and read sensitive information of the subscribers contained inthe data.

Additional support systems 44 will likely be provided to facilitate themanagement and administration of registry site 30. Examples of thesesupport systems include a report server 46, an email server 48, anadvertising server 50, an administration server 52, a billing server 54,and a system monitor 56. Other support systems will be provided asnecessary to administer and manage the operation of the business of theregistry site relating to servicing the needs of subscribers andcontrolling access to the sensitive data maintained on database server42.

When the lab has posted the test results for a subscriber to theregistry site for inclusion in the data maintained there, the subscribercan be notified either by email, by facsimile transmission, or by aphone call (made by the system in an automated fashion) to inform thesubscriber that the test results have been uploaded automatically ormanually to the registry site and can be accessed by the subscriber.These test results can then be checked by the subscriber. Preferably,the subscriber will not be able to selectively withhold the display oftest results from a similar group of test results once said test resultshave been transmitted to the registry without terminating his or hersubscription to the registry, thereby expunging the subscriber's testingdata history and invalidating further use of the subscriber's primaryusername and password. In the event that the subscriber arranges fortest results for drug use and test results for STDs to be stored at theregistry site, it is contemplated that the subscriber will be enabled toselect the type of test results (i.e., drug use test results or STD testresults, in this example) to be included among the data that a guest orprospective partner of the subscriber can access to verify the medicalcondition of the subscriber based upon the results of the lab tests. Itis contemplated that automatic notifications of the subscriber by emailor facsimile transmission, informing the subscriber that the testresults are available on the registry site, can be customized by aparticular testing lab to comply with specific trademark branding needsof the testing lab, but will not contain any personal information or theactual test results, as such messages will be transmitted throughunsecured channels and might be accessed by third parties. When theregistry site receives the test results from the testing lab, anautomated verification email message will be transmitted to the testinglab from the registry site, providing proof that the registry site hasreceived those results from the testing lab. Alternatively, the registrysite may generate automatic notification of the subscriber that testresults are available for review on the registry site.

As an alternative to automated uploading of test results to the registrysite, subscribers may elect to have the test results forwarded to themfrom the testing lab in a more traditional fashion, i.e., by personalmail, or over the telephone. Once the subscriber has received andreviewed the test results, the subscriber can at that time, request thatthe testing lab post the results to the registry site. Only afterreceiving permission from the subscriber would the testing lab forwardthe results of the tests, along with validated identificationinformation for the subscriber, to serve as proof of the subscriber'sidentity when the test results are accessed at the registry site, by aguest or prospective partner.

It is also contemplated that the subscriber may choose to use one ormore kits to carry out medical tasting at home, or may elect to havemedical tests performed by a non-affiliated testing lab. Also, some hometest kits must be mailed into a testing lab for determination of theresults of the tests. A subscriber will have the option of manuallyposting such tests to the registry site. However, test results that aremanually posted and not provided by an affiliated testing lab which hasnot drawn the test sample from a subscriber whose identity has beenverified will not have the benefit of a validation of the subscriber'sidentity, and thus will be unable to serve as proof of the subscriber'smedical condition. Any guest or prospective sexual partner accessingresults that are posted without benefit of the validation of thesubscriber's identity will be clearly warned in the display of theresults that the registry site is posting the results as a service tothe subscriber, but without proof of the subscriber's identity. Theguest will thus be alerted that the test results do not serve asevidence of the subscriber's medical condition, since they might befictitious, or may be for a person other than the actual subscriber.

One of the benefits of enabling the subscriber to post medical testresults from sources other than an affiliated testing lab and without aproof of identity is to maintain a history of the tests that can bereadily accessed by the subscriber. In addition, posting of such testresults may be beneficial in facilitating discussions between thesubscriber and the subscriber's physician, since it is possible thatboth the subscriber and the physician can simultaneously access the testresults (assuming that the subscriber has provided permission and aguest password and/or guest ID number to the physician to access theresults).

Summary of Procedures Used in Present Invention

FIG. 2 illustrates the steps involved in the overall use of the registrysite for registering subscribers and for receiving, posting, andenabling access of test results that serve as proof of a medicalcondition of the subscriber. Following a start block, a block 100indicates that a consumer registers as a subscriber with the registrysite (e.g., InformedPartner.com). As part of the registration process,the subscriber may optionally be required to provide an indicia ofidentification (e.g., a digital copy of a passport photograph or a validdriver's license), although, it will be more likely that the indicia ofidentification will be required simply to confirm the identity of thesubscriber for purposes of payment by a credit or debit card, or byother non-cash means. As noted above, the registration can beaccomplished over a variety of different types of devices that canaccess the registry site over the Internet, including information kiosk26, and testing lab kiosk 32. By registering with the registry site, thesubscriber agrees to be financially liable for the subscription fee andfor any other fees associated with the subscriber's use of the registrysite. As noted above, such fees may include a fee charged each time thatthe personal information and data of the subscriber are accessed, and afee charged each time that medical test results are posted to theregistry site. In a block 102, the subscriber visits an affiliatedtesting lab, having arranged for the testing lab to draw a sample inorder to carry out the test requested by the subscriber. It is possiblethat the appointment for visiting the testing lab will be made from theregistry site, but can alternatively be made over the telephone orduring a previous visit to the testing lab. For the purposes of thisexemplary application of this invention, the medical tests will likelybe for STDs, and more likely, be limited to potentially life threateningor currently incurable kinds of STDs.

Examples of the types of tests that might be made for potentiallylife-threatening or currently incurable STDs include the Elisaimmunoassay (EIA), the Western blot or other confirmatory test for HIV;the hepatitis B surface antigen and hepatitis C antibody tests; and theHerpes simplex virus type 2 (HSV 2)-specific serology test. Additionaltests for curable sexually transmissible diseases may be included, suchas culture, ligase chain reaction (LCR) and polymerase chain reaction(PCR) tests for chlamydia trachomatis and neisseria gonorrhoeae; rapidplasma reagin (RPR), Venereal Disease Research Laboratories (VDRL) orother confirmatory test for syphilis; and tests for Epstein-Barr virus(EBV), cytomegalovirus (CMV) and varicella-zoster virus (VZV). Ofcourse, many other types of tests may be carried out within the scope ofthe present invention, including those for other types of medicalconditions that are not sexually transmitted and/or are tests fordiseases or medical conditions that are not incurable or potentiallylife threatening.

In a block 104, the lab draws a sample from the subscriber and at thattime, verifies the identity of the subscriber. Verification of theidentity of the subscriber can be based upon presentation by thesubscriber of any kind of legally acceptable picture identification,such as a driver's license, passport, or other common legally acceptedindicia of identification. However, in most cases, it is expected that asubscriber will present a driver's license with a picture as proof ofhis or her identity. The testing lab also may access (e.g., only at anaccess level necessary for interaction with medical testing labproviders) the subscriber's identification information on the registrysite to match the presented indicia of identification to that on theregistry site, if such identification information was providedpreviously by the subscriber to the registry site. A block 106 indicatesthat the subscriber provides to the testing lab the customer ID that wasobtained from the registry site, so that the customer ID can beassociated with the test results and with the subscriber identificationdata. Optionally, such customer ID can be verified by the testing lab byaccessing the registry site. Although various types of identificationdata are contemplated, the simplest verification data for thesubscriber's identification is the driver's license number of thesubscriber.

In a block 108, the testing lab records the customer ID and the IDverification in association with the lab test, on the request form. In ablock 110, the lab completes the medical tests requested by thesubscriber, obtaining results that are then posted (automatically ormanually) to the registry site, along with the customer ID andidentification verification data, as indicated in a block 112. As notedabove, it is also contemplated that the subscriber may alternativelychoose to receive and verify the test results before requesting that thetesting lab post them to the registry site.

A block 114 indicates that the testing lab or registry site notifies thesubscriber that the test results have been posted to the registry site.The notification can be automated, as described above. The subscriberverifies the lab results and the personal information on the registrysite, typically using a browser to access the information. Of course,the results of the test can only be accessed by the subscriber after thesubscriber enters the user name and password previously assigned to thesubscriber. In addition, a block 116 provides for the subscriber to setthe guest access rights, specifically defining the data of thesubscriber that will be accessible to a guest or prospective sexualpartner. Preferably, the subscriber will be unable to deny a guest orprospective partner access to selected test results contained in thesubscriber's testing history, other than by type of test results, asnoted above. Thus, for example, a subscriber will not be allowed toauthorize access to only a portion of STD test results for thesubscriber, but will be allowed to authorize access by a guest to onlyall of the subscriber's STD test results, while excluding access by theguest to the subscriber's drug use test results, or vice versa.

Typically at some later point in time, the subscriber will interact witha potential sexual partner. In order to show proof of a medicalcondition satisfying the prospective sexual partner, the subscriber willprovide the prospective partner with the guest password/and or guest IDnumber and customer ID for the subscriber as indicated in a block 118.As noted in a block 120, the prospective sexual partner can then accessthe authorized data of the subscriber on the registry site using theguest password and/or guest ID number, and customer ID of thesubscriber. A block 122 indicates that the guest or prospective partnerreviews the subscriber's test results and verifies the person's(subscriber's) identity against the identification verification dataincluded with the test result data of the subscriber on the registrysite. Assuming that the identification verification data confirm thatthe identity of the subscriber who was tested is that of the personasserting a medical condition, the prospective partner will at least beassured that, at the time of the medical test, the results shown at theregistry site were valid. Naturally, such test results may no longer beapplicable. The longer the time interval between the current date andthe date of the medical tests, the less assured a prospective partnerwill be by viewing the test results of a subscriber. For this reason, itis likely that subscribers will be tested more frequently than theywould otherwise, which should help (statistically) in detecting anySTD-infected subscribers at an earlier time than would otherwise be thecase. Also, the registry site will provide educational content directedto STDs, including epidemiology, clinical manifestations, diagnosis,treatment, and references to or copies of the most recent scientificliterature relating to topics of potential interest to the subscriber,and will make very clear that subscribers and guests are encouraged topractice safe sexual procedures to minimize the risk of infection fromany type of STD.

An alternative embodiment of the present invention is directed to aregistry site that is intended to be accessed telephonically. Thesubscriber would access the registry site via a telephone access numberand enter his or her customer ID and password through an alpha-numerickeypad. The subscriber also could provide a guest or prospective partnerwith the subscriber's customer ID and a guest password and/or ID numberthat, through similar use of an alpha-numeric keypad, would allow accessto the subscriber's information on the registry. The guest orprospective partner then would be allowed to hear an automated listingof the subscriber's testing history. The automated response wouldinclude the subscriber's driver's license number or other identifyinginformation that could be matched against the corresponding informationpresented by and identifying the party claiming to be the subscriber. Ifthe two parties are located together when the registry is accessedtelephonically and the guest or prospective partner also is a subscriber(i.e., a “partner subscriber”) to the registry site, the partnersubscriber, without terminating the call and redialing, would enter hisor her customer ID and password, thereby accessing the partnersubscriber's testing history and verifying that the automated responsepreviously heard was, indeed, generated by the registry site and was nota fraudulent automated recording from some other source. The partnersubscriber then could allow the subscriber to hear the automated listingof the partner subscriber's testing history and identifying information.

Details of Registering as a Subscriber

Further details of the steps taken by a consumer to register with theregistry site as a subscriber are illustrated in FIGS. 3 through 5.These Figures illustrate three different approaches that can be used.FIG. 3 shows the steps involved in registering with the registry siteover the Internet, beginning with a block 150. In a block 152, aconsumer who is considering becoming a subscriber to the service offeredby the registry site accesses the site using a web browser. In a block154, the consumer selects a registration option provided on a web pageof the registry site in order to subscribe to the service. Havingselected this option, a block 156 indicates that the subscriber isqueried to provide personal information, e.g., by displaying aregistration form in the consumer's browser. Such information mayinclude birth date, gender, mailing address, phone number, emailaddress, etc. The subscriber then selects a primary user name andpassword, as indicated in a block 158. In addition, as noted in a block160, the subscriber selects a guest password and/or guest ID number andsets the associated guest access rights. In many cases, the subscribermay not choose to disclose all test results to a guest, but may limitthe data accessible to the guest to the results of a most recent testfor STDs. Preferably, the subscriber will be unable to deny a guest orprospective partner access to selected test results from thesubscriber's testing history for a particular type of test, e.g., accessto only a portion of the STD test results.

A block 162 provides that the subscriber selects the subscription optionand provides a payment method, which will typically be a credit card.The information typically required for accepting payment by credit cardwill be provided by the subscriber at this time, including the type ofcredit card, card number, expiration date of the card, billing address,etc. It is also contemplated that other forms of payment can beprovided, including payment by debit card, and by other financialinstruments, including personal check. Once this information has beenentered at the registry site over a SSL connection, a block 164indicates that the subscriber is assigned a unique customer ID, which isprovided to the subscriber for use in referencing the subscriber'spersonal information and test results on the registry site.

Alternatively, a consumer may elect to register with the registry siteover the phone as indicated in a block 170. If so, a block 172 providesthat the consumer phones the customer service department for theregistry site. In a block 174, a customer service representativeanswering this telephone call collects the personal information from theconsumer and describes the subscription offerings to the consumer,answering any other questions the consumer may have. In a block 176, theconsumer selects the subscription option and chooses a payment method.Again, the various conventional ways of providing payment to theregistry site for the services rendered will include credit or debitcards and other financial instruments. In a block 178, the subscriberselects a primary user name and password, while in a block 180, thesubscriber chooses a guest password and/or guest ID number and sets theassociated access rights for a guest. Finally, in a block 182, thesubscriber is assigned a unique customer ID number that is given to thecustomer over the telephone.

FIG. 5 illustrates steps that are similar to those in FIG. 3, exceptthat as indicated in a block 190, the consumer initiates theregistration from a testing lab kiosk (or from an information kiosk thatmight be found in locations likely frequented by those interested in theservices provided by the registry site). A block 192 provides that, inthis case, the consumer visits the testing lab, perhaps already havingarranged for a test to be made for one or more STDs without knowledge ofor direction from the registry site. While making the visit, theconsumer may learn that the services offered by the registry site areavailable and will then use the kiosk to access the registry site. In ablock 194, the consumer again selects the registration option providedon the homepage of the registry site in order to subscribe to theservices offered. Remaining blocks 196 through 204, respectively, inFIG. 5, correspond to blocks 156 through 164 in FIG. 3.

Verification of Subscriber Identification

FIGS. 6 and 7 illustrate two alternative methods for verifying thesubscriber's identification—both at the time the subscriber appears atthe testing lab to “be tested,” and later, when the test results areaccessed by a guest or prospective sexual partner on the registry site.In regard to FIG. 6, the procedure begins with a block 210 in which thesubscriber's driver's license (or other indicia of identification) isused as a basis for verifying identity. Accordingly, in a block 212 thetesting lab reviews the subscriber's driver's license to confirm thatthe picture shown there corresponds to the appearance of the person fromwhom the test sample is drawn. In addition, the testing lab may access(but preferably only at an access level necessary for interaction withmedical testing providers) the subscriber's identification informationon the registry site to confirm that the subscriber's identificationmatches that of the individual undergoing the test. Based upon adetermination that the person appears to be the individual identified bythe driver's license (and matches the indicia of identification on theregistry site, if accessed), a block 214 indicates that the testing labrecords the driver's license number in association with the test orderedby the subscriber for STDs (or other type of test). Preferably, therecorded indicia of identification accompany the test sampleelectronically throughout the sample's testing process. According to ablock 216, the testing lab then draws a sample from the subscriber whoseidentification has been confirmed, and completes the test using standardtesting procedures. In a block 218, as previously noted, the subscriberalso provides the customer ID, that was obtained from the registry sitewhen the subscriber registered, to the testing lab for association withthe test results. In a block 220, the testing lab records the customerID and driver's license number for the subscriber with the test resultsobtained upon completing the test or analysis.

A block 222 provides that an optional further confirmation of theverification of the identification can be provided by scanning the image(photograph) of the subscriber included on the driver's license using aconventional scanner. The scanned image can be posted with the testresults to the registry site and viewed by a guest accessing the testresults with the permission of the subscriber as further proofconfirming the identity of the subscriber in connection with the testresults. In a block 224, the test results accessible at the registrysite are linked to the driver's license number (and to the scanned imageof the driver's license submitted by the subscriber, if available).

An alternative for providing verification of the identification of thesubscriber is shown in FIG. 7, beginning with a block 230. In a block232, the testing lab takes a digital photograph of the subscriber usingany of the readily available digital cameras. The digital photographproduced by the camera is attached to the test request by the testinglab in a block 234 and, preferably, accompanies the sampleelectronically through the sample's testing process. In a block 236, thetesting lab draws a sample from the subscriber and completes the testsrequested by the subscriber in a block 238. When the test results areposted to the registry site, as indicated in a block 240, the digitalphotograph is included and is associated with the test results. Thus, asprovided in a block 242, the test results can be viewed on the registrysite, linked to the digital photograph. Thus, the image of thesubscriber is displayed on the registry site in association with thetest results as proof of the identity of the subscriber, therebyproviding evidence to a guest who has received permission from thesubscriber to access the test results and the digital photo, of themedical condition asserted by the subscriber, as confirmed by the testresults.

It is also contemplated that other types of identification can beemployed as an alternative to the driver's license number, scanned imageof the driver's license, and digital photograph of the subscriber. Forexample, biometric data of the subscriber may be taken at the time atest sample is drawn from the subscriber and included with the testresults that are posted at the registry site. Confirmation of theidentity of the subscriber can then be achieved by a guest accessing thetest results if the party claiming to be the subscriber has alreadysubmitted corresponding biometric data to the registry site. Theregistry site can then indicate whether the biometric data submittedwhen the subscriber registered with the site matches the biometric datarecorded when the subscriber was tested by the testing lab, therebyconfirming that the subscriber tested is in fact the party asserting themedical condition confirmed by the test results. In addition, thebiometric data to be compared to that accompanying the test results maybe submitted in the presence of the guest, thereby further confirmingthe identity of the subscriber who was tested matches that of the partyasserting a medical condition confirmed by the test results. Thebiometric data may be a retinal scan, digital fingerprint scan, facialscan, voice print, etc. Input devices for scanning any of these varioustypes of biometric data may eventually be more commonly available,making this alternative more practical.

It is contemplated that in some cases, a subscriber will desire medicalresults to be posted and will permit access by a guest or prospectivepartner to those test results even though the results confirm that thesubscriber has tested positive for a STD. For example, a prospectivepartner may have refused a sexual liaison with the subscriber because ofconcern of infecting the subscriber, if the prospective partner hastested positive for HSV-2. In this case, the prospective partner maywish to confirm that the subscriber has also tested positive for HSV-2,thereby alleviating, to some extent, the concerns that either may infectthe other.

A subscriber will not be able to change the test results that are postedto the registry site and, preferably, the subscriber will not be able todeny a guest or prospective partner access to selected tests from thesubscriber's testing history. However, at any time, the subscriber maydelete or purge his or her entire history of medical tests from theregistry site's database, terminating his or her subscription with thesite and invalidating his or her customer ID number.

Further Details of the Process

Further details of the overall process disclosed in FIG. 2 areillustrated in FIGS. 8 through 10. For example, FIG. 8 begins with ablock 250 in which the steps involved in posting the results of a testin an automated fashion are carried out by the testing lab. A block 252provides that the test is completed to determine the results. Ina block254, the testing lab posts the results of the test to the registry sitevia an SSL encrypted link, through a VPN, ensuring that the test resultsare not intercepted by any third party. If these test results are postedto the registry site without intervention of any personnel at theregistry site, the potential for introducing an error in the posting ofthe results is minimized. Although the registry site cannot attest tothe accuracy of the test performed by the testing lab, the processemployed for automatically posting the results of the test to theregistry site ensures that further errors are not introduced. Asindicated in a block 256, the test results will include the consumeraccount ID, thereby relating the test results to a specific subscriber,and a proof of the identity of a subscriber, such as the driver'slicense number, scanned image of the subscriber's driver's license, or adigital photograph of the subscriber.

With reference to FIG. 9, a block 260 begins the alternative process ofenabling the subscriber to review the test results before they areposted to the registry site. In a block 262, the test results areproduced by the testing lab as requested by the subscriber. A block 264provides that the testing lab notifies the subscriber of the testresults, by telephone, mail, or other relatively secure format. Afterreviewing the test results, the subscriber has the option of requestingthat the testing lab post the results to the registry site, as indicatedin a block 266. Assuming that the subscriber has made such a request,block 268 indicates that the testing lab posts the test results to theregistry site for access by the subscriber and by any guest givenpermission by the subscriber. Further, as noted in a block 270, the testresults are associated with the consumer account ID provided to thesubscriber by the registry site and with the verification of thesubscriber's identity, such as the subscriber's driver's license number,the scanned image of the driver's license, or the digital photographtaken of the subscriber.

FIG. 10 illustrates the steps taken for manually posting test results tothe registry site, where it is understood that these results do notserve as proof of a medical condition, i.e., for purposes of convincinga prospective sexual partner that the subscriber was tested or that theasserted medical condition was determined by a test of the subscriber.In a block 280, the steps for manually posting the test results begin. Ablock 282 provides that the test results are produced by a testing lab,but can be based upon a sample submitted by the subscriber after using ahome test kit, or as a sample from the subscriber submitted to a testinglab that is not affiliated with the registry site. In a block 284, thetesting lab notifies the subscriber of the test results. The subscriberthen enters the test results on the registry site manually, for example,by making entries within a browser displayed form provided on theregistry site, as indicated in a block 286. However, as noted in a block288, the test results thus entered are not associated with any proof ofthe subscriber's identity, and therefore cannot serve as evidence of amedical condition if presented to a guest authorized by the subscriberto view the results.

FIG. 11 illustrates basic components of PC 20, which currently is likelyto be the most commonly used device for connecting to the registry siteover the Internet. These components include a central processing unit(CPU) 300 that is coupled in communication with a memory 302, whichincludes both read-only memory (ROM) and random access memory (RAM).Memory 302 is loaded with machine instructions that are typically storedon a hard drive 304. The machine instructions, which comprise programmodules and other software components of applications such as a browserare executed by CPU 300. Thus, the CPU can execute a browsing programused to access the registry site and to view information of asubscriber, including the test results and verification of thesubscriber's identity. CPU 300 is connected to a display interface 306,which drives a display 308, on which the browser displays informationobtained by access of the registry site. To connect to the registrysite, CPU 300 receives and transmits data bi-directionally over anetwork interface 312 in response to commands input by the user throughuser input devices 310, which may include a keyboard and/or pointercontrol device (or mouse). Network interface 312 may include a modem, ora network interface card that connects to a data communication port on anetwork through which the registry site is accessed over the Internet,generally as shown in FIG. 1.

Although the present invention has been described in connection with thepreferred form of practicing it, those of ordinary skill in the art willunderstand that many modifications can be made thereto within the scopeof the claims that follow. Accordingly, it is not intended that thescope of the invention in any way be limited by the above description,but instead be determined entirely by reference to the claims thatfollow.

What is claimed is:
 1. A computer-implemented method comprising: underthe control of one or more computing devices, receiving the results of amedical test regarding a user from a testing entity; receiving a testsubject identifier confirming the identity of the user as the subject ofthe medical test, the test subject identifier comprising an image of atleast the face of the user generated by the testing entity inconjunction with the medical test, wherein the test subject identifieris distinct from the results of the medical test; processing the testsubject identifier with the results of the medical test to link the testsubject identifier and the results of the medical test; storing, in adata store, the results of the medical test of the user together withthe test subject identifier to which the results are linked; receiving,from a party authorized by the user, a request for the results of themedical test; and providing, to the party authorized by the user, theresults of the medical test and linked test subject identifierconfirming the identity of the user as the subject of the medical test.2. The computer-implemented method of claim 1 further comprising:receiving the results of a second medical test regarding the user; andprocessing the test subject identifier with the results of the secondmedical test to link the test subject identifier and the results of thesecond medical test.
 3. The computer-implemented method of claim 2further comprising receiving, in conjunction with the results of thesecond medical test, a second test subject identifier confirming theidentity of the user as the subject of the second medical test.
 4. Thecomputer-implemented method of claim 2 further comprising providing, tothe party authorized by the user, the results of the second medicaltest.
 5. The computer-implemented method of claim 1, wherein providingthe results of the medical test and the linked test subject identifiercomprise outputting the results of the medical test and the linked testsubject identifier for display to the party authorized by the user. 6.The computer-implemented method of claim 1, wherein the medical testcorresponds to at least one of a test regarding sexually transmitteddisease, blood glucose, protimes, troponin, myoglobin, or creatinine. 7.The computer-implemented method of claim 1 further comprising verifyingthe test subject identifier based at least in part on user information.8. A system comprising: a non-transitory data store; and a processor incommunication with the non-transitory data store, the processorconfigured with computer executable instructions to: receive the resultsof a medical test regarding a user; receive a test subject identifierconfirming the identity of the user as the subject of the medical test,the test subject identifier comprising an image of at least the face ofthe user, wherein the test subject identifier is distinct from theresults of the medical test and is generated by a testing entity inconjunction with the medical test; process the test subject identifierand the results of the medical test to generate a link between the testsubject identifier and the results of the medical test within the datastore; receive, from a party authorized by the user, a request forresults of medical tests of the user; and provide, to the partyauthorized by the user, the results of the medical test and the linkedtest subject identifier confirming the identity of the user as thesubject of the medical test.
 9. The system of claim 8, wherein theprocessor is further configured to: receive the results of a secondmedical test regarding the user exclusive of receiving a second testsubject identifier confirming the identity of the user as the subject ofthe second medical test; and process the results of the second medicaltest to indicate an absence of the second test subject identifier withinthe data store.
 10. The system of claim 8, wherein the processor isfurther configured to provide, to the party authorized by the user, theresults of the second medical test and a notification of the absence ofthe second test subject identifier.
 11. The system of claim 10, whereinthe processor is further configured to output the results of the secondmedical test and the notification of the absence of the second testsubject identifier for display to the party authorized by the user. 12.The system of claim 8, wherein the processor is configured to providethe linked test subject identifier based at least in part on detectionof the generated link within the data store.
 13. The system of claim 8,wherein the medical test corresponds to at least one predefined type ofmedical test.
 14. The system of claim 13, wherein the at least onepredefined type of medical test is not modifiable by the subscriber. 15.The system of claim 13, wherein the processor is further configured toprovide, to the party authorized by the user, all results of medicaltests corresponding to the at least one predefined type of medical test.16. The system of claim 8, wherein the test subject identifier isverified by the testing entity.
 17. A non-transitory computer-readablestorage medium including computer executable instructions comprising:first computer executable instructions that, when executed by aprocessor, cause the processor to: receive the results of a medical testregarding a user; receive test subject identifier confirming theidentity of the user as the subject of the medical test, the testsubject identifier comprising an image of at least the face of the user,wherein test subject identifier is distinct from the results of themedical test and is generated by a testing entity in conjunction withthe medical test; and process the test subject identifier and theresults of the medical test to generate a link between the test subjectidentifier and the results of the medical test; and second computerexecutable instructions that, when executed by the processor, cause theprocessor to: receive, from a party authorized by the user, a requestfor results of medical tests of the user; detect the generated linkbetween the test subject identifier and the results of the medical test;and provide, to the party authorized by the user, the results of themedical test and the linked test subject identifier confirming theidentity of the user as the subject of the medical test.
 18. Thenon-transitory computer-readable storage medium of claim 17, wherein themedical test corresponds to at least one predefined type of medicaltest.
 19. The non-transitory computer-readable storage medium of claim18, wherein the at least one predefined type of medical test is notmodifiable by the subscriber.
 20. The non-transitory computer-readablestorage medium of claim 18, wherein the second computer executableinstructions further cause the processor to provide, to the partyauthorized by the user, all results of medical tests corresponding tothe at least one predefined type of medical test.
 21. The non-transitorycomputer-readable storage medium of claim 17, wherein the first computerexecutable instructions further cause the processor to store thegenerated link between the test subject identifier and the results ofthe medical test within a data store.